Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a16d3308-ebb1-39d2-a0ea-d124e8999059.roa
File: a16d3308-ebb1-39d2-a0ea-d124e8999059.roa (raw, json)
Hash identifier: j0hxpWYYlb3WdGKC+vcUZRSiMAsSo+SdIyzOre7UxHM=
Subject key identifier: 4E:9C:90:42:FE:5D:D4:99:1E:E3:FC:32:78:56:F7:DE:4E:62:F6:27
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285843E2F23E181C7FAEF6D1306C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a16d3308-ebb1-39d2-a0ea-d124e8999059.roa
Signing time: Tue 14 Nov 2023 15:12:59 +0000
ROA not before: Tue 14 Nov 2023 15:12:59 +0000
ROA not after: Mon 12 Feb 2024 15:12:59 +0000
asID: 7029
IP address blocks: 2604:cb00:40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e2:f2:3e:18:1c:7f:ae:f6:d1:30:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Nov 14 15:12:59 2023 GMT
Not After : Feb 12 15:12:59 2024 GMT
Subject: CN=fb999847-fcc3-4076-b4c4-5c533da6c6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:42:26:42:d1:78:33:ff:7e:0b:30:d0:2b:
b7:ee:32:86:40:73:da:3d:f7:0c:47:d6:9d:6d:d0:
43:cf:14:f2:0e:b7:ff:6e:b6:9c:22:ae:9b:de:ce:
2a:a6:6b:dc:86:2e:ff:49:ad:ab:b5:57:c5:68:1d:
4b:09:6a:25:46:a4:57:86:86:58:c2:2e:ec:f8:80:
5c:b1:af:7b:fe:ec:24:91:f1:b7:ee:93:6b:05:df:
99:95:aa:3d:fb:70:12:64:67:ba:90:21:63:dc:57:
01:b2:36:c9:e0:29:0d:3d:ea:19:be:30:60:b0:de:
73:d9:82:94:8d:17:34:db:a9:42:af:e1:41:81:df:
88:ac:de:d9:db:9c:fa:6a:69:8b:e3:e5:ab:91:1d:
8d:5e:4b:1e:c0:92:eb:96:7a:66:bd:d2:53:f8:62:
76:47:6f:5c:a0:e7:a1:b4:5e:ac:6e:9a:b4:59:66:
fd:b4:2f:0d:83:ae:a0:e3:84:4f:95:5b:02:ce:73:
7d:75:cf:56:7b:5b:a5:3b:0e:c0:60:0c:a5:5a:35:
29:ed:6a:ac:40:3e:45:52:ab:5b:e3:3e:e0:ef:ed:
c1:5d:fa:4e:cf:ee:cc:d0:30:03:20:17:7f:dd:90:
d6:a2:1e:96:89:b8:a9:a6:7c:fe:f1:f5:18:18:8c:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:90:42:FE:5D:D4:99:1E:E3:FC:32:78:56:F7:DE:4E:62:F6:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a16d3308-ebb1-39d2-a0ea-d124e8999059.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:42:52:a0:6c:00:b3:80:fa:b7:b3:63:71:e5:22:88:0f:ba:
3b:3d:e0:d6:83:6d:8e:dc:8c:3e:d6:01:77:5b:4a:8e:68:ff:
df:8e:a9:fc:bf:43:94:ac:20:b9:57:fb:07:d4:34:37:2f:0f:
16:f3:32:62:19:20:68:dd:e2:ab:65:b4:41:95:3b:61:1f:a1:
f3:90:a7:31:65:25:34:ca:58:11:fc:00:21:ae:d0:c2:07:b3:
0a:6a:b5:99:05:37:1f:90:96:73:71:3d:7e:6c:7a:b7:ab:58:
46:36:fe:87:32:84:2e:ba:a7:dd:3d:a6:95:86:f8:cf:61:1d:
cd:bb:21:fc:b0:4d:02:7d:32:dc:33:21:4a:ca:a1:15:08:74:
ca:67:fb:fe:95:79:86:32:cb:3a:cc:bf:31:ec:f1:ad:b0:a3:
93:05:cd:f7:74:0a:09:75:0c:a2:0c:15:01:89:47:c1:97:bb:
85:4a:f4:ff:80:4b:f7:37:02:ed:e5:50:04:53:aa:2b:56:15:
7e:a5:18:6c:06:d5:ca:15:28:9b:9e:04:ba:f5:db:74:7b:59:
92:39:55:30:e5:e5:7f:30:47:4e:b3:48:52:5b:d0:a7:d0:28:
ad:e8:1e:61:2d:ab:d7:98:bd:ae:df:6e:66:ee:78:19:40:da:
73:5e:31:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:26:49 2025 by rpki-client